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1. This opinion contains indications relating to the following items: 



I2SI 


Box No. I 


Basis of the opinion 


□ 


Box No. II 


Priority 


□ 


Box No. ID 


Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 


□ 


BoxNo. IV 


Lack of unity of invention 




Box No. V 


Reasoned statement under Rule 436/j.l(a)(i) with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 


□ 


BoxNo.VI 


Certain documents cited 


□ 


Box No. VII 


Certain defects in the international application 


13 


Box No. Vm 


Certain observations on the international application 



2. FURTHER ACTION 

If a demand for international preliminary examination is made, this opinion will be considered to be a written opinion of the 
International Preliminary Examining Authority ("IPEA") except that this does not apply where the applicant chooses an 
Authority other than this one to be the IPEA and the chosen IPEA has notified the International Bureau under Rule 66.lbis(b) 
that written opinions of this International Searching Authority will not be so considered. 

If this opinion is, as provided above, considered to be a written opinion of the IPEA, the applicant is invited to submit to the 
IPEA a written reply together, where appropriate, with amendments, before the expiration of 3 months from the date of mailing 
of Form PCT/ISA/220 or before the expiration of 22 months from the priority date, whichever expires later. 
For further options, see Form PCT/ISA/220. 

3. For further details, see notes to Form PCT/ISA/220. 
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International application No. 
PCT/IL04/01191 


Box No. I' Basis of this opinion 


1. With regard to the language, this opinion has been established on the basis of the international application in the language in which it 
was filed, unless otherwise indicated under this item. 


fl This opinion has been established on the basis of a translation from the original language into the following language , 

which is the language of a translation furnished for the purposes of international search (under Rules 12.3 and 23.1(b)). 


2. With regard to any nucleotide and/or amino acid sequence disclosed in the international application and necessary to the claimed 
invention, this opinion has been established on the basis of: 


a. type of material 




1 1 a sequence listing 




f~~l table(8) related to the sequence listing 




b. format o f material 




["1 in written format 




1 1 in computer readable form 




c. time of filing/furnishing 




1 1 contained in international application as filed. 




fl filed together with the international application in computer readable form 


fl furnished subsequently to this Authority for the purposes of search. 


3. 0 In addition, in the case that more than one version or copy of a sequence listing and/or table relating thereto has been filed 
or furnished, the required statements that the information in the subsequent or additional copies is identical to that in the 
application as filed or does not go beyond the application as filed, as appropriate, were furnished. 


4. Additional comments: 
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Box No. V Reasoned statement under Rule 43 Z>fe.l(a)(i) with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 



1. Statement 

Novelty (N) 



Inventive step (IS) 
Industrial applicability (IA) 



Claims NONE 



Claims 1-20 



.YES 
NO 



Claims NONE 



Claims 1-20 



_YES 
_NO 



Claims 1-20 



Claims NONE 



_YES 
NO 



2. Citations and explanations: 
Please See Continuation Sheet 
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Box No. Vm Certain observations on the international application 

The following observations on the clarity of the claims, description, and drawings or on the questions whether the claims are folly 
supported by the description, are made: 

Claims 7 & 17 are objected to as lacking clarity under PCT Rule 66.2(a)(v) because the claims are not fully supported by the 
description. The application, as originally filed, did not describe: Claims 7 and 17 recite the limitation "sign in parameters" the 
specification doesnt describe the details of the "session sign in parameters". 

Claims 8 & 18 are objected to as lacking clarity under PCT Rule 66.2(a)(v) because the claims are not fully supported by the 
description. The application, as originally filed, did not describe: Claims 8 and 18 recite the limitation "initial session type parameters" 
the specification doesnt describe the details of the " initial session type parameters 
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V. 2. Citations and Explanations: , 
Claims 1-20 lacks novelty under PCT Article 33(2) as being anticipated by Carter et al. US 2003/0051026. 

Regarding claims 1 & 1 1: Carter discloses a security system for preventing unauthorized processes activities vnlhin a 
netwrk server environment {Page 10, Paragraph 1 68), wherein each process is associated to at least one identified 
communication session (Page 21. Paragraphs 341 & 349 /session ID) and the process authorization is determined m 
accordance with predefined rules (Page 26, Paragraph 393), wherein said rules refer to the properties of the identified 
communication session (Page 25, Paragraph 383 /Rules defining the processes access). 

Regarding claims 2 & 12: Carter discloses the system of claim 1 further comprising of a mteimgmodme installed on each 
server for blocking unauthorized processes activities in accordance with determined authonzauon (Page 36, Paragraphs 
655, 657 & Page 48 Paragraph 984 /a sub-layer to block all processes associated with attacks by filtering out all 
IP addresses related to the process in the Process Matiix Vector). 

Regarding claims 3 & 13: Carter discloses the systemof claim 1 wherein the system includes at least one agent installed 
on one of the protected servers within the server network environment, said agent enables correlahng between processes 
and sessions on different servers (Page 36 paragraphs 653, 656 & Page 37 Paragraphs 665. 667 & 671 / 
Commander, Demons, KnS, Agents and angels perform correlation and access control). 

Regarding claims 4 & 14: Carter discloses thee system of claim 1 wherein for each process an identification code of the 
identified communication session is added to the process information vector (Page 23, Paragraph 363 /Process ID 
PID). 

Regarding claims 5 & 15: Carter disclose the systemof claim 4 wherein the identification code replaces redundant 
information in the process information vector (Page 21, Paragraphs 341 & 342 /PID vector). 

Regarding claims 6 & 16: Carter discloses the system of claim 1 wherein the processes are associated to the identified 
communication session by a unique process identifier (Page 21, Paragraphs 342,346). 

Regarding claims 7 & 17: Carter discloses the system of claim 1 wherein the identified session properties are sign in 

parameters (Page 21, Paragraph 349). 
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Regarding claims 8 & 18: Carter discloses the system of claim 1 wherein the identified session properties are initial 
session type parameters (Page 21, Paragraph 351 & Page 23 paragraph 363). 

Regarding claims 9 & 19: Carter discloses the system of claim 1 wherein the identified session properties are hyperlink 
session address type parameters. 

Regarding claims 10 & 20: Carter discloses the system of claim 6 wherein the communication session is identified 
according to a unique Transmission Control Protocol (TCP) port ID (Page 21 Paragraphs 349, 350& 351). 

Claims 1-20 meet the criteria set out in PCT Article 33(4) and thus have industrial applicability because the subject matter claimed can 
be made or used in industry. 
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